Only allow logged-in users to view files in /Media

Topics: Administration
Aug 30, 2012 at 5:09 PM

I have some confidential docs in the Media folder - e.g. /Media/Default/Docs/System720Tutorials.pdf . How do I make sure only people with Orchard accounts can access those?

Developer
Aug 30, 2012 at 5:21 PM

Modify the web.config file in the root of Media to deny access to anonynmous users and allow access to authenticated users:

 

http://weblogs.asp.net/gurusarkar/archive/2008/09/29/setting-authorization-rules-for-a-particular-page-or-folder-in-web-config.aspx

Sep 10, 2012 at 2:14 PM

Great :)

Thanks, sfmskywalker.